You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
347 lines
7.1 KiB
347 lines
7.1 KiB
#!/bin/bash
|
|
|
|
exname=$(basename $0)
|
|
|
|
prefix_cmd="
|
|
. /etc/shlib
|
|
|
|
include common
|
|
include parse
|
|
|
|
. ../lib/common
|
|
|
|
"
|
|
|
|
|
|
##
|
|
## print_bytes
|
|
##
|
|
|
|
# mock
|
|
relation-get() {
|
|
local key="$1"
|
|
echo "$CFG" | shyaml get-value "$key" 2>/dev/null
|
|
}
|
|
export -f relation-get
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
apache_vhost_statement ,http,"
|
|
noerror
|
|
is out '<VirtualHost *:80>
|
|
|
|
ServerAdmin contact@www.example.com
|
|
ServerName www.example.com
|
|
|
|
ServerSignature Off
|
|
CustomLog /var/log/apache2/www.example.com_access.log combined
|
|
ErrorLog /var/log/apache2/www.example.com_error.log
|
|
ErrorLog syslog:local2
|
|
|
|
##
|
|
## Publish directory /var/www/www.example.com
|
|
##
|
|
|
|
DocumentRoot /var/www/www.example.com
|
|
|
|
<Directory />
|
|
Options FollowSymLinks
|
|
AllowOverride None
|
|
</Directory>
|
|
|
|
<Directory /var/www/www.example.com>
|
|
Options Indexes FollowSymLinks MultiViews
|
|
AllowOverride all
|
|
Allow from all
|
|
</Directory>
|
|
|
|
|
|
## Forbid any cache, this is only usefull on dev server.
|
|
#Header set Cache-Control "no-cache"
|
|
#Header set Access-Control-Allow-Origin "*"
|
|
#Header set Access-Control-Allow-Methods "POST, GET, OPTIONS"
|
|
#Header set Access-Control-Allow-Headers "origin, content-type, accept"
|
|
|
|
</VirtualHost>' RTRIM
|
|
|
|
##
|
|
## Aliases
|
|
##
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
CFG='
|
|
server-aliases:
|
|
- toto
|
|
'
|
|
apache_vhost_statement ,http,"
|
|
noerror
|
|
is out reg 'ServerAlias toto'
|
|
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
CFG='
|
|
server-aliases:
|
|
- toto
|
|
- titi
|
|
'
|
|
apache_vhost_statement ,http,"
|
|
noerror
|
|
is out reg 'ServerAlias toto'
|
|
is out reg 'ServerAlias titi'
|
|
|
|
|
|
##
|
|
## Creds
|
|
##
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
CFG=''
|
|
apache_vhost_statement ,http,"
|
|
noerror
|
|
is out reg 'Allow from all'
|
|
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
CFG='
|
|
creds:
|
|
toto: xxx
|
|
titi: yyy
|
|
'
|
|
apache_vhost_statement ,http,"
|
|
noerror
|
|
is out reg 'AuthType basic'
|
|
is out reg 'Require valid-user'
|
|
|
|
|
|
##
|
|
## proxy
|
|
##
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
CFG='
|
|
target: popo:3333
|
|
creds:
|
|
toto: titi
|
|
'
|
|
proxy=yes apache_vhost_statement ,http,"
|
|
noerror
|
|
is out reg 'ProxyPass / http://popo:3333/'
|
|
is out part '
|
|
<Location / >
|
|
AuthType basic
|
|
AuthName "private"
|
|
AuthUserFile /etc/apache2/sites-enabled/www.example.com.passwd
|
|
Require valid-user
|
|
ProxyPassReverse /
|
|
</Location>
|
|
'
|
|
|
|
##
|
|
## ssl
|
|
##
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
CFG='
|
|
ssl: true
|
|
target: popo:3333
|
|
'
|
|
SSL_PLUGIN_FUN=ssl_fallback proxy=yes apache_vhost_statement ,https," "ssl default generation (ssl-cert-snakeoil)"
|
|
noerror
|
|
is out reg 'VirtualHost \*:443'
|
|
is out reg '<IfModule mod_ssl.c>'
|
|
is out reg 'SSLEngine On'
|
|
is out reg 'SSLProxyEngine On'
|
|
is out reg 'ssl-cert-snakeoil'
|
|
is out reg 'CustomLog /var/log/apache2/s-www.example.com_access.log combined'
|
|
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
CFG='
|
|
ssl:
|
|
ca-cert: a
|
|
key: b
|
|
cert: c
|
|
target: popo:3333
|
|
'
|
|
SSL_PLUGIN_FUN=ssl_fallback proxy=yes apache_vhost_statement ,https," "ssl providing keys inline"
|
|
noerror
|
|
is out reg 'SSLCertificateFile /etc/ssl/certs/www.example.com.pem'
|
|
is out reg 'SSLCertificateKeyFile /etc/ssl/private/www.example.com.key'
|
|
is out reg 'SSLCACertificateFile /etc/ssl/certs/www.example.com-ca.pem'
|
|
|
|
|
|
##
|
|
## CustomRules
|
|
##
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
CFG='
|
|
ssl:
|
|
ca-cert: a
|
|
key: b
|
|
cert: c
|
|
apache-custom-rules: |
|
|
RewriteEngine On
|
|
RewriteCond %{QUERY_STRING} !skin=formanoo
|
|
RewriteRule ^(/web/webclient/home.*)$ $1?skin=formanoo [L,QSA,R=302]
|
|
target: popo:3333
|
|
'
|
|
SSL_PLUGIN_FUN=ssl_fallback proxy=yes apache_vhost_statement ,https," "custom rules"
|
|
noerror
|
|
is out reg 'RewriteEngine On'
|
|
|
|
|
|
##
|
|
## double def
|
|
##
|
|
|
|
try "
|
|
DOMAIN=www.example.com
|
|
DOCKER_SITE_PATH=/var/www/\$DOMAIN
|
|
CFG='
|
|
ssl:
|
|
ca-cert: a
|
|
key: b
|
|
cert: c
|
|
apache-custom-rules: |
|
|
RewriteEngine On
|
|
RewriteCond %{QUERY_STRING} !skin=formanoo
|
|
RewriteRule ^(/web/webclient/home.*)$ $1?skin=formanoo [L,QSA,R=302]
|
|
target: popo:3333
|
|
'
|
|
SSL_PLUGIN_FUN=ssl_fallback proxy=yes apache_vhost_statement ,https,http," "both http and https"
|
|
noerror
|
|
is out '<VirtualHost *:80>
|
|
|
|
ServerAdmin contact@www.example.com
|
|
ServerName www.example.com
|
|
|
|
ServerSignature Off
|
|
CustomLog /var/log/apache2/www.example.com_access.log combined
|
|
ErrorLog /var/log/apache2/www.example.com_error.log
|
|
ErrorLog syslog:local2
|
|
|
|
|
|
##
|
|
## Custom rules
|
|
##
|
|
|
|
RewriteEngine On
|
|
RewriteCond %{QUERY_STRING} !skin=formanoo
|
|
RewriteRule ^(/web/webclient/home.*)$ ?skin=formanoo [L,QSA,R=302]
|
|
|
|
|
|
##
|
|
## Proxy declaration towards popo:3333
|
|
##
|
|
|
|
<IfModule mod_proxy.c>
|
|
ProxyRequests Off
|
|
<Proxy *>
|
|
Order deny,allow
|
|
Allow from all
|
|
</Proxy>
|
|
ProxyVia On
|
|
ProxyPass / http://popo:3333/ retry=0
|
|
<Location / >
|
|
Allow from all
|
|
ProxyPassReverse /
|
|
</Location>
|
|
|
|
</IfModule>
|
|
|
|
RequestHeader set "X-Forwarded-Proto" "http"
|
|
|
|
## Fix IE problem (httpapache proxy dav error 408/409)
|
|
SetEnv proxy-nokeepalive 1
|
|
|
|
## Forbid any cache, this is only usefull on dev server.
|
|
#Header set Cache-Control "no-cache"
|
|
#Header set Access-Control-Allow-Origin "*"
|
|
#Header set Access-Control-Allow-Methods "POST, GET, OPTIONS"
|
|
#Header set Access-Control-Allow-Headers "origin, content-type, accept"
|
|
|
|
</VirtualHost>
|
|
|
|
<IfModule mod_ssl.c>
|
|
<VirtualHost *:443>
|
|
|
|
ServerAdmin contact@www.example.com
|
|
ServerName www.example.com
|
|
|
|
ServerSignature Off
|
|
CustomLog /var/log/apache2/s-www.example.com_access.log combined
|
|
ErrorLog /var/log/apache2/s-www.example.com_error.log
|
|
ErrorLog syslog:local2
|
|
|
|
|
|
##
|
|
## Custom rules
|
|
##
|
|
|
|
RewriteEngine On
|
|
RewriteCond %{QUERY_STRING} !skin=formanoo
|
|
RewriteRule ^(/web/webclient/home.*)$ ?skin=formanoo [L,QSA,R=302]
|
|
|
|
|
|
##
|
|
## Proxy declaration towards popo:3333
|
|
##
|
|
|
|
<IfModule mod_proxy.c>
|
|
ProxyRequests Off
|
|
<Proxy *>
|
|
Order deny,allow
|
|
Allow from all
|
|
</Proxy>
|
|
ProxyVia On
|
|
ProxyPass / http://popo:3333/ retry=0
|
|
<Location / >
|
|
Allow from all
|
|
ProxyPassReverse /
|
|
</Location>
|
|
SSLProxyEngine On
|
|
</IfModule>
|
|
|
|
RequestHeader set "X-Forwarded-Proto" "https"
|
|
|
|
## Fix IE problem (httpapache proxy dav error 408/409)
|
|
SetEnv proxy-nokeepalive 1
|
|
|
|
## Forbid any cache, this is only usefull on dev server.
|
|
#Header set Cache-Control "no-cache"
|
|
#Header set Access-Control-Allow-Origin "*"
|
|
#Header set Access-Control-Allow-Methods "POST, GET, OPTIONS"
|
|
#Header set Access-Control-Allow-Headers "origin, content-type, accept"
|
|
|
|
##
|
|
## SSL Configuration
|
|
##
|
|
|
|
SSLEngine On
|
|
|
|
SSLCertificateFile /etc/ssl/certs/www.example.com.pem
|
|
SSLCertificateKeyFile /etc/ssl/private/www.example.com.key
|
|
SSLCACertificateFile /etc/ssl/certs/www.example.com-ca.pem
|
|
|
|
SSLVerifyClient None
|
|
|
|
</VirtualHost>
|
|
</IfModule>' RTRIM
|